HIPAA - Documentation 164.316(b)(1)

Overview:
(i) Maintain the policies and procedures implemented to comply with this subpart in written (which may be electronic) form; and
(ii) If an action, activity or assessment is required by this subpart to be documented, maintain a written (which may be electronic) record of the action, activity, or assessment.

Action Items:
1) Obtain and review policies and procedures regarding the maintenance of policies and procedures.
2) Obtain and review documentation demonstrating that policies and procedures are being maintained.
3) Obtain and review written documentation demonstrating the entity's action, activity or assessment that is required by the Security Rule. Evaluate and determine if such implementation is in accordance with related policies and procedures.

Related Documents:
1) Policies and procedures regarding the maintenance of policies and procedures.
2) Documentation demonstrating that policies and procedures are being maintained.
3) Documentation demonstrating the entity's action, activity or assessment that is required by the Security Rule.

Additional Guidance:
The Documentation standard has three implementation specifications.
1. Time Limit
2. Availability
3. Updates